#405: Define variables that were left undefined

[patrickmcelwee]

Fixes #405

This seems to fix it ... someone who understands this better should review the code to make sure I pull the values from the right places.

[grtjn]

I was playing around with some changes that looked roughly similar I think. I was also trying to fix the bug of this passport stuff that caused the guestaccess to fail. I have to take a closer look though, but my quick impression was that this looks sound..

[Audarth]

I had a bug happen when I tried to update the profile of the user,

it was in line 41 of proxy.js
!req.query.uri.match('/api/users/' + req.session.user.username + '.json'))) {

looks like it actually needs to be:

!req.query.uri.match('/api/users/' + req.session.passport.user.username + '.json'))) {

[grtjn]

I'll append that last change myself. Thanks for the PR and the testing!